From e2c72845294ef8069db18bd38ca5bf4561a940c9 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Sat, 1 Sep 2012 08:26:31 -0700 Subject: [PATCH] Correct handling of 'source' with ADMINISABSENTMINDED=No Signed-off-by: Tom Eastep --- Shorewall/Perl/Shorewall/Misc.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Shorewall/Perl/Shorewall/Misc.pm b/Shorewall/Perl/Shorewall/Misc.pm index 2d9d7d9f1..a8ba902d7 100644 --- a/Shorewall/Perl/Shorewall/Misc.pm +++ b/Shorewall/Perl/Shorewall/Misc.pm @@ -634,7 +634,6 @@ sub process_routestopped() { my $rule = shift @rule; add_rule $filter_table->{INPUT}, "$sourcei $source $rule -j ACCEPT", 1; - add_rule $filter_table->{OUTPUT}, "$desti $dest $rule -j ACCEPT", 1 unless $config{ADMINISABSENTMINDED}; my $matched = 0; @@ -644,6 +643,7 @@ sub process_routestopped() { } if ( $dest{$host} ) { + add_rule $filter_table->{OUTPUT}, "$desti $dest $rule -j ACCEPT", 1 unless $config{ADMINISABSENTMINDED}; add_rule $filter_table->{FORWARD}, "$desti $dest $rule -j ACCEPT", 1; $matched = 1; }